In the Claims : 

This listing of claims will replace all prior versions and listings of claims in the application. 

1. (Currently Amended) A digital signature system comprising: 

a database holding access control rules that identify documents authorized users are 
allowed to have electronically signed; and 

a signing system capable of receiving signature requests from a plurality of authorized 
users, each signature request including a preexisting document to be signed, wherein said 
signing system parses the preexisting document to be signed and compares information 
obtained thereby to the access control rules stored in said database to determine whether the 
authorized user is authorized to have the document signed, and wherein if it is determined that 
the authorized user is authorized to have the document signed, the signing system signs the 
document using authentication information unique to the signing system. 

2. (Original) A digital signature system as recited in claim 1, wherein the access 
control rules identify at least one of a type and attribute of documents each user is authorized 
to have signed. 

3. (Currently Amended) A digital signature system as recited in claim 2, wherein the 
signing system parses the preexisting document to be signed to determine at least one of a type 
and attribute of the document and compares the determined type and attribute of the document 
to the access control rules stored in the database to determine whether the user is authorized to 
have the document signed. 

4. (Original) A digital signature system as recited in claim 1, wherein the request 
further includes user authentication information unique to the requesting user, and wherein the 
signing system authenticates the user via the user authentication information and does not parse 
the document unless the user authenticates. 

5. (Original) A digital signature system as recited in claim 4, wherein said user 
authentication information comprises a digital certificate, with corresponding public and 
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private keys. 

6. (Original) A digital signature system as recited in claim 5, wherein the digital 
certificate comprises an X-509 certificate. 

7. (Original) A digital signature system as recited in claim 4, further comprising an 
email interface, wherein the signature request is in the form of an email from the user 
addressed to the signing system. 

8. (Original) A digital signature system as recited in claim 7, wherein said user 
authentication information comprises a user's email address. 

9. (Original) A digital signature system as recited in claim 8, wherein the signing 
system authenticates the user by comparing the user's email address to email addresses stored 
in the database. 

10. (Original) A digital signature system as recited in claim 1, further comprising a 
document validation server capable of receiving document validation requests from a user 
requesting a signed document to be validated and determining whether the signed document is 
valid in response to the request. 

1 1 . (Original) A digital signature system as recited in claim 1 , wherein after the 
document validation server signs the document, the signed document is electronically 
forwarded to the user so that the user can forward the signed document to the recipient. 

12. (Original) A digital signature system as recited in claim 1, wherein after the 
document is signed, the signed document is emailed to the user. 

13. (Original) A digital signature system as recited in claim 1, wherein after the 
document is signed, the signed document is automatically electronically forwarded to a 
recipient. 
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14. (Original) A digital signature system as recited in claim 13, wherein the signed 
document is emailed to the recipient. 

15. (Currently Amended) A method of digitally signing documents using a signing 
system comprising: 

storing access control rules that identify documents authorized users are allowed to 
have electronically signed; 

receiving a signature request from at least one user, the signature request including a 
preexisting document to be signed; 

determining whether the user is authorized to have documents signed; 

if the user is authorized, parsing the preexisting document to be signed; 

comparing information obtained by the parsing to the stored access control rules to 
determine whether the authorized user is authorized to have the attached document signed; and 

if it is determined that the authorized user is authorized to have the attached document 
signed, signing the document using authentication information unique to the signing system. 

16. (Original) A method as recited in claim 15, wherein the access control rules 
identify at least one of a type and attribute of documents each user is authorized to have 
signed. 

17. (Currently Amended) A method as recited in claim 16, wherein the parsing step 
parses the preexisting document to be signed to determine at least one of a type and attribute 
of the document and the comparing step compares the determined type and attribute of the 
document to the access control rules stored in the database to determine whether the user us 
authorized to have the document signed. 

18. (Original) A method as recited in claim 15, wherein the request further includes 
user authentication information unique to the requesting user, and wherein the signing system 
authenticates the user via the user authentication information and does not parse the do cument 
unless the user authenticates. 
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19. (Original) A method as recited in claim 18, wherein said user authentication 
information comprises a digital certificate, with corresponding public and private keys. 

20. (Original) A method as recited in claim 19, wherein the digital certificate comprises 
an X-509 certificate. 

21. (Original) A method as recited in claim 15, further comprising an email interface, 
wherein the signature request is in the form of an email from the user addressed to the signing 

system. 

22. (Original) A method as recited in claim 21, wherein it is determined whether the 
user is an authorized user, by comparing a user's email address with a list of stored email 
addressed corresponding to authorized users. 

23. (Original) A method as recited in claim 15, further comprising electronically 
forwarding the signed document to the user so that the user can forward the signed document 
to the recipient. 

24. (Original) A method as recited in claim 15, further comprising emailing the signed 
document to the user. 

25. (Original) A method as recited in claim 15, further comprising electronically 
forwarding the signed document to an end recipient. 

26. (Original) A method as recited in claim 25, wherein the signed document is 
emailed to the end recipient. 

27. (Currently Amended) A signing system for digitally signing documents comprising: 
storing means for storing access control rules that identify documents authorized users 

are allowed to have electronically signed; 
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receiving means for receiving a signature request from at least one user, the signature 
request including a preexisting document to be signed; 

determining means for determining whether the user is authorized to have documents 

signed; 

parsing means for parsing the preexisting document to be signed if the user is 
authorized; 

comparing means for comparing information obtained by the parsing means to the 
stored access control rules to determine whether the authorized user is authorized to have the 
attached document signed; and 

signing means for signing the document using authentication information unique to the 
signing system if it is determined that the authorized user is authorized to have the attached 
document signed. 

28. (Original) A system as recited in claim 27, wherein the access control rules identify 
at least one of a type and attribute of documents each user is authorized to have signed. 

29. (Currently Amended) A system as recited in claim 28, wherein the parsing means 
parses the preexisting document to be signed to determine at least one of a type and attribute 
of the document and the comparing meansp means compares the determined type and attribute 
of the document to the access control rules stored in the database to determine whether the 
user us authorized to have the document signed. 

30. (Original) A system as recited in claim 27, wherein the request further includes 
user authentication information unique to the requesting user, and wherein the signing system 
authenticates the user via the user authentication information and does not parse the document 
unless the user authenticates. 

31. (Original) A system as recited in claim 30, wherein said user authentication 
information comprises a digital certificate, with corresponding public and private keys. 

32. (Original) A system as recited in claim 31, wherein the digital certificate comprises 
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an X-509 certificate. 

33. (Original) A system as recited in claim 27, further comprising an email interface 
means, wherein the signature request is in the form of an email from the user addressed to the 
signing system. 

34. (Original) A system as recited in claim 33, wherein it is determined by the 
determining means whether the user is an authorized user, by comparing a user's email 
address with a list of stored email addresses corresponding to authorized users. 

35. (Original) A system as recited in claim 27, further comprising forwarding means 
for electronically forwarding the signed document to the user so that the user can forward the 
signed document to the recipient. 

36. (Original) A system as recited in claim 27, further comprising email means for 
emailing the signed document to the user. 

37. (Original) A system as recited in claim 27, further comprising means for 
electronically forwarding the signed document to an end recipient. 

38. (Original) A system as recited in claim 37, wherein the signed document is 
emailed to the end recipient. 

39. (Currently Amended) A digital signature system comprising: 

database means for holding access control rules that identify documents authorized 
users are allowed to have electronically signed; and 

signing means capable of receiving signature requests from a plurality of authorized users, 
each signature request including a preexisting document to be signed, wherein said signing 
means parses the preexisting document to be signed and compares information obtained 
thereby to the access control rules stored in said database means to determine whether the 

authorized user is authorized to have the document signed, and wherein if it is determined that 
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the authorized user is authorized to have the document signed, the signing means signs the 
document using authentication information unique to the signing means. 
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